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SUMMARY 

A combinatorial reliability approach was used to Identify potential 
dynamic power conversion systems for space mission applications. A reliability 
and mass analysis was also performed, specifically for a 100 kWe nuclear Brayton 
power conversion system with parallel redundancy. Although this study was 
done for a reactor outlet temperature of 1100 K, preliminary system mass esti- 
mates are also Included for reactor outlet temperatures ranging up to 1500 K. 


INTRODUCTION 

In the design of space power conversion systems, the overall system reli- 
ability and system weight are major trade-off considerations. Hence an analy- 
sis of the reliability of a dynamic power conversion system (PCS), consisting 
of a number of redundant units, must consider the effect of Increased relia- 
bility on overall system weight. In particular the number and size of the 
Individual units (each with a given unit reliability and weight) Is varied In 
order to arrive at a minimum weight system which will meet the desired system 
reliability goal. Conversely, the same procedure can be used to obtain the 
maximum system reliability for a given system weight constraint. 

A two-step approach was used at the NASA Lewis. First, extensive compu- 
tations on system reliability, with the number of spare units being systemati- 
cally varied, were performed for both the "parallel" (operating spares) and 
the "standby" (dormant spares) mode of operation. As per reference 1, the 
analysis assumed a Bernoulli (binomial) failure rate distribution for the 
parallel mode and a Poisson distribution for the standby mode. Computer codes 
were written for the reliability analysis of each operating mode and results 
In the form of overall system reliability maps for different values of unit 
reliability were obtained. 

Based on purely mathematical results, assuming Ideal system components, 
standby operation was shown to produce higher system reliabilities than did 
the parallel operating mode. However, analysis of reliability results In terms 
of practical (nonideal) operating systems Indicates an advantage of parallel 
over standby operation. This advantage derived from factors relating to the 
operating environment, such as absence of switching transients and standby 
degradation, both characteristic of standby operation, as well as Improved 
unit reliability due to reduced unit loads at the start of parallel operation. 

In the second step of the procedure, dynamic system mass models were 
applied to selected system configurations consisting of multiple modular 
Brayton units operating In parallel, each using a single radiator, with 
component and overall system reliabilities specified. Although the system 
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mass data obtained can be used to Identify a "minimum mass" PCS configuration 
an argument Is made for also Including a "complexity" criterion In the system 
selection process. 


DISCUSSION 

Candidate Design Concepts and Operating Modes 

Some of the basic concepts considered for dynamic PCS's are Indicated In 
the block diagrams of figure 1 (R symbolizes "reactor") which show the use of 
one, two and three PCS units In a system. Concepts for a multiplicity of PCS 
units ranging from 4 to any number, n, are similar. Operational diagrams for 
one to three PCS units are shown In table 1 for both parallel and standby 
Initial operating modes. The same configurations are shown In table 2 for the 
sequential operating modes, which Indicate the operating strategy after the 
first PCS unit has failed, assuming that each unit Is sized for full power 
operation. To examine the relative merits of the parallel and standby operat- 
ing modes, each will be discussed In detail. The reader can also find more 
Information on this topic In any text which treats "combinatorial reliability" 
(as for example Shooman 1968). 


Parallel Operating Mode Theory 

The assumptions used for parallel operation are: 

(1) Each PCS unit success/fal lure Is an Independent event and the system 
reliability Is therefore governed by a binomial frequency distribution. 

(2) Each PCS unit Is Identical and sized for up to full load power output 
(load). 

(3) Each PCS unit starts operating at the same time (T =0). 

(4) Each PCS unit Initially operates at equal part power such that the 
sum of partial outputs meets the load. 

(5) When a PCS unit falls, the remaining units Increase their power out- 
put to meet load requirements and the failed unit Is shut down. 

(6) Reliability of a PCS unit Is assumed constant at either full or 
partial load power. 

Although, for simplicity, each PCS unit In tables 1 and 2 was assumed to 
be sized for full load operation, It Is Important to note that considerations 
of practicality, such as system mass, size, and cost will affect the sizing of 
PCS unit output. A better strategy would be to size each unit so that the 
aggregate output from all units exceeds the output load requirement by an 
arbitrary amount, say 20 or 30 percent. This would permit each unit to be 
operated at a reasonable part-power condition (l.e., approximately 70 to 80 
percent of full load) where the stresses and wear on each unit would be 
reduced. As a result the unit reliability P would rise, thereby Increasing 
the overall system reliability R. An Investigation of the sensitivity of R 
to this assumption Is presented In the Results section of this report. 
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With the assumptions listed above, the reliability of an Ideal parallel 
operating dynamic PCS Is given by the binomial distribution. The binominal 
distribution calculation procedure and a description of the symbols used Is 
shown In the appendix. In evaluating the system reliability R, computation 
of terms outside the brackets Is straightforward, but attempts to evaluate the 
factorial term In the brackets for n greater than 55 will cause an exponent 
overflow on most digital computers with maximum real number limits of 10^6. 
This problem was solved by using an algorithm that computes the sum of the 
logarithms of each term In the sequence of numbers 1 to n, subtracts the sums 
of logarithms of the denominator terms, computed In a similar fashion, and 
then finds the antllog of the result. In expanding the summation for R, one 
can obtain polynomial expressions In terms of P as shown In the appendix 
for n = 2 (case 1) and n = 3 (case 2). In general these expressions will be 
polynomials of degree n and the number of terms will be n-k. Each of the 
terms In the expansion represents the probability of exactly r units operat- 
ing out of n units. Thus, for k = 1, the first term gives the probability 
of exactly one unit operating (not falling); the second term, exactly two 
operating, and so on. The summation gives the probability of at least k 
units operating out of a total of n units. 


Standby Operating Mode Theory 

The assumptions made for standby operation are: 

(1) The success/fal lure of standby PCS units Is a dependent event and. the 
system reliability Is therefore governed by a Poisson frequency distribution. 

(2) Each PCS unit Is Identical and sized for full load power output. 

(3) Only one PCS unit starts operating at T = 0 and It operates at full 
power to meet the load requirement. 

(4) Remaining PCS units are In a standby (warm/ldl Ing) condition with no 
degradation assumed. 

(5) When an on-line PCS unit falls, a standby PCS unit Is "turned-on" and 

It operates at full power to meet the load demand. 

(6) Ideal sensing of a failed PCS and Ideal switching to a standby PCS Is 

assumed. 

Note that In this operating mode each unit must be sized for full load 
output. It Is Important to note that the assumptions of (1) ho degradation 
while In standby, (2) Instant ramping to full load, and (3) Ideal sensing and 
switching are not likely or practical for nonideal systems. Therefore, some 
judgement should be used In calculating system reliability by means of the 
Poisson distribution. For example, because of degradation of unit reliability 
during standby, and nonideal sensing, switching and ramping, additional 
stresses may be put on each PCS unit as It Is brought Into service. As a 
result the unit reliability would drop, thus lowering the overall system 
reliability below the value calculated for constant P, which Is the Ideal 

case. Reactions of the sensitivity of R to various assumed values of P 

are presented In the Results section of this report. 
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The Poisson distribution calculation procedure, which applies to Ideal 
standby operation, Is also outlined In the appendix. Note that, whereas for 
parallel operation R denotes the cumulative probability of at least k PCS 
units operating out of a total of n units. In standby operation R denotes 
the probability of no more than n-1 units falling sequentially out of a total 
of n units, with n-1 units Initially In standby. As before, the summation 
to be evaluated for computing R can be expressed In terms of polynomials of 
degree n, as shown for n = 2 (case 1) and n = 3 (case 2). Each of the terms 
In the expansion of the summation represents the probability of exactly r 
units falling sequentially out of a total of n units. In case 1 for example, 
the first term (P) denotes the probability that exactly zero units fall, while 
the second term (-P In P) gives the probability that exactly one unit failure 
will occur, and the sum of the two terms gives the cumulative probability that 
at most one (zero or one) of two units will fall, that Is the probability that 
at least one of two units will be available for service. A summary of system 
reliability calculation procedures for systems containing up to three units Is 
shown In table 3. 

Both the appendix and table 3 show that the calculation of system relia- 
bility, R, requires specification of unit reliability, P. This value Is 
usually calculated from mean tlme-to-fallure data expressed as "failure rate", 
as shown by equation (3) In the appendix. The relationship between failure 
rate and unit reliability Is graphically Illustrated In figure 2 for required 
service lifetimes of two and seven years. Failure rate values for some typical 
electronic components and DC-10 aircraft cabin air conditioning units are also 
Indicated on the figure. 


CALCULATION RESULTS 

The results of reliability calculations for one, two, or three unit 
systems are given In table 4 for principal unit reliability values of 0.6, 

0.7, 0.8, and 0.9. In addition, system reliability values are shown for unit 
reliabilities equal to 95 percent of the principal values for the standby 
operating mode and for unit reliability equal to 105 percent of the principal 
values for the parallel operating mode. 

Figure 3 shows graphical displays of the system reliability results given 
In table 4, assuming that the unit reliability remains constant regardless of 
operating mode. Based on this assumption, the standby mode appears to be 
superior, although the differences In system reliability become small for unit 
reliabilities above 0.9. Given the arguments presented In prior sections of 
this paper on operating mode theories, the unit reliability In real systems Is 
expected to Increase In the parallel operating mode and degrade In the standby 
mode. Although quantitative values of the unit reliability changes are not 
available, an Indication of system reliability trends was obtained by arbi- 
trarily assuming that for parallel operation the unit reliability will Improve 
to 1.05 times the original value, whereas for standby operation the unit reli- 
ability will degrade to 95 percent of the original value. System reliability 
results for these assumptions are plotted In figure 4. Comparing figure 4 to 
figure 3, we see that the parallel operating mode Is equal to or even superior 
to the standby mode for unit reliabilities greater than 0.8. Because of this 
fact and the higher expected standby PCS weight (since every single unit must 
be sized for full load operation), the standby operating mode was not consid- 
ered for further analysis. Nor Is the standby operating mode recommended for 
real life (nonideal) dynamic PCS. 
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Number of Spares for Parallel Mode 


For a parallel connected system of n units (each of unit reliability P), 
an Important question to be answered concerns the number of spare units 
required to Insure a desired system reliability R. Typical results are given 
in figure 5, for a unit reliability P = 0.9. This figure shows the Integer 
number of required spares as a function of the Integer number of parallel units 
(spares not Included) ranging from 1 to 100 units. The three functions plot- 
ted are for required system reliabilities of 0.95, 0.99 and 0.999, as indi- 
cated. Application of figure 5 can be demonstrated by the following example: 
Assume that we have 10 units, each capable of delivering 10 kW for a total 
output of 100 kW. If each unit has a reliability of 0.9 then the overall sys- 
tem reliability R, without any spares, will be equivalent to (0.9)10, or 
0.349. If we desire a higher system reliability, additional units (spares) 
must be provided. Figure 5 shows that providing 3 spares (total of 13 units) 
will ensure an R no lower than 0.95, 4 spares (total of 14 units) will guar- 
antee an R no lower than 0.99, while 6 spares (total of 16 units) will ensure 
an R no lower than 0.999. These results were obtained with the assumption 
that the unit reliability P remains unchanged at 0.9 even with the spares 
added. However, with 14 or 16 units sharing the total load of 100 kWe, each 
unit can be operated at between 62.5 and 71.4 percent of its rated capacity. 

As a result the unit reliability P will probably Increase (Shooman 1968). 

The amount of this Increase in P will be a function of the characteristics 
of the specific dynamic power conversion system considered. Arbitrarily assum- 
ing that the unit reliability Increases from 0.9 to 0.95, figure 6 shows that 
only 2 spares are needed for R no lower than 0.95, 3 spares for R no lower 
than 0.99, and 4 spares for R no lower than 0.999. 

The new number of units is still large enough for each to be operated at 
below rated capacity (71 percent for 14 units and 77 percent for 13 units). 
Hence the assumption of increased unit reliability due to reduced load still 
holds. 


Reliability-System Mass Trade-offs 

Assuming parallel mode operation the overall system mass was computed for 
a selected number of Brayton engine configurations connected to an 1100 K 
liquid-metal-cooled reactor. In the Interest of minimizing engine subsystem 
complexity the total number of units was limited to 10, including a maximum of 
2 spares. 

Since figures 5 and 6 showed the number of spares required to meet a 
desired system reliability goal, assuming constant unit reliability, the effect 
of a varying unit reliability on reliability of the engine subsystem is shown 
in figure 7. This is done for four engine configurations comprising two excess 
power generating capacities, each obtained with 1 or 2 spares. It is interest- 
ing to note that for low unit reliabilities - below about 0.87 for 125 percent 
design power (25 percent excess capacity) and below 0.84 for 133 percent design 
power (33 percent excess capacity) - the system reliability with the 2 spares 
configuration is actually lower than for the 1 spare configuration at the same 
excess capacity. As excess capacity Increases, the unit reliability, at which 
.the 1 or 2 spare configuration will result in the same system reliability, 
will decrease. Thus, at 200 percent system power (100 percent excess capac- 
ity), the crossover unit reliability is only 0.67, indicating that for unit 
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reliabilities above this value the "2 spare" engine configurations will result 
In higher system reliabilities than the "1 spare" configuration. Of course, 
the converse Is also true. 

For the system mass calculations of this study the PCS unit reliability, 
excluding the radiator, was assumed to be 0.95, a value well above the cross- 
over unit reliability of even the 25 percent excess capacity configuration. 

Even so, the 0.95 unit reliability value (approximately one failure per million 
hours) Is Judged to be conservative for an 1100 K Brayton system. The overall 
system reliability goal was arbitrarily set at 0.95, with the system consisting 
of a single reactor and engine heat transport system which supplies the dynamic 
PCS, consisting of up to ten (10) engine units, each with Its own radiator. 

With the reactor-heat transport system having an assumed reliability of 0.98, 
the PCS reliability (Including radiators) was fixed at 0.9694 (0.98/0.95), In 
order for the overall system reliability to equal 0.95. Hence the required 
radiator unit reliability became a variable, determined by the PCS configura- 
tion and the 0.9694 PCS reliability requirement. 

The component weights and operating parameters of typical Brayton engine 
modules were obtained from an In-house computer code. Identified as CCEP 
(Closed Cycle Engine Program). This code was used to arrive at minimum mass 
engine modules ranging In size from 25 kWe to 100 kWe. The design power output 
was 100 kWe. Analyses for minimum overall system mass were done by using a 
VSAPL Brayton optimization code, written by the author. 

The reactor and shield mass was based on Information supplied by LANL 
(Los Alamos National Lab.) assuming a 500 kWt llquld-metal-cooled reactor 
designed for 3-percent burnup and a 15-degree cone tungsten-lithium hydride 
shield. The shield mass was based on a gamma dose of 5xl0 5 rads and an 
Integrated neutron flux of 10 13 nvt at a separation distance of 25 m from 
the reactor. The remaining system components used In the mass calculations 
Included the main radiator, power conditioning equipment with associated 
auxiliary radiator, waste heat exchanger, Interconnecting structure, and feed 
lines. 

The results of the reliability-system mass trade-off study are shown In 
figure as a function of total system capacity. As expected, the 2-spares 
configurations resulted In a higher engine subsystem reliability than those 
with 1 spare. Regarding the system mass data (solid symbols). It may appear 
surprising that the 2-spares configurations also had a lower total mass. The 
main reason for this Is that with the higher engine subsystem reliability, the 
required radiator reliability can be lowered. This translates Into lower 
radiator mass and also Into lower overall system mass. However, the mass 
difference between the 2-spares and the 1-spare configurations Is only about 
7 percent, which Is close to the accuracy of the mass model. 

In addition to overall reliability and mass there Is a third parameter 
which should be considered In the selection of a power conversion system, 
namely system complexity. Although difficult to measure In numerical terms. 

It Is reasonable to assume that the complexity of a system Increases with the 
number of parallel operating units. Following this line of reasoning, the 
relatively small mass advantage of the 2-spares configurations would be Insuf- 
ficient to compensate for their Increased complexity. Hence, based on the 
data of figure 8, either the 5/4 (five 25-kWe engines with four required for 
full power) or the 4/3 (four 33.3-kWe engines with three required for full 
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power) configuration could be selected, with the former having a mass advantage 
of about 2 percent 3570 kg versus 3640 kg) and the latter having a higher 
engine subsystem reliability and fewer operating units. Figure 8 also shows 
that, with the exception of the unacceptable 1/1 or zero spare configuration, 
the 3000 kg SP-100 mass goal could not be achieved at a reactor outlet tempera- 
ture of 1100 K. To Illustrate system mass trends at higher reactor outlet 
temperatures, the results of preliminary mass calculations are shown In figure 9 
for the 4/3 PCS configuration with reactor outlet temperature varying to 1500 K. 
A reactor outlet temperature of about 1250 K Is shown to be required for the 
3000 kg mass goal. 


CONCLUDING REMARKS 

Analysis of parallel and standby redundancy for dynamic power conversion 
systems showed that parallel operation Is superior to standby operation, con- 
sidering both reliability and total mass. System reliability and mass trade- 
off studies were also performed for a 100 kWe parallel operating nuclear 
Brayton system. Results Indicate that at an overall system reliability of 
0.95, a PCS configuration consisting of four parallel units each capable of 
delivering up to 33.3 kWe would weigh approximately 3600 kg. For reactor out- 
let temperatures about 1250 K, system mass would decrease below 3000 kg assum- 
ing no degradation of component reliabilities occurs. 
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Table 1 : Initial Operational Modes for PCS Consisting of One, Two, or Three Units 


CONFIGURATION 

INITIAL OPERATING MODE 

1. PCS 1 

o o 

SERIES (PCS 1 ON LINE AT FULL POWER) 

2. PCS 1 

PARALLEL (PCS 1 AND PCS 2 EACH ON LINE AT HALF POWER) 

PCS 2 

STANDBY (PCS 1 ON LINE AT FULL POWER, 
PCS 2 ON STANDBY) 

3. PCS 1 

Acs A 

PARALLEL (PCS 1, PCS 2, AND PCS 3 EACH ON LINE AT 
ONE THIRD POWER) 

STANDBY (PCS 1 ON LINE AT FULL POWER, 
PCS 2 AND PCS 3 ON STANDBY) 



Table 2: Sequential Operational Modes for PCS Consisting of One, Two, or Three Units 


CONFIGURATION 

SEQUENTIAL OPERATING MODE 

1 . 

PCS 1 

(1) 

SERIES: 

PCS 1 ON LINE) 


0 0 




2. 

PCS 1 

(1) 

(2) 

PARALLEL: 

SERIES: 

(PCS 1 AND PCS 2 ON LINE AT HALF POWER 
(PCS 1 FAILED; PCS 2 ON LINE AT FULL POWER) 


ocr rso 


PCS 2 

(1) 

STANDBY: 

(PCS 1 ON LINE AT FULL POWER. PCS 2 STANDBY 



(2) 

SERIES: 

(PCS 1 FAILED; PCS 2 ON LINE AT FULL POWER) 

3. 

PCS 1 

(1) 

PARALLEL: 

(PCS 1, PCS 2, PCS 3 ON LINE AT ONE THIRD POWER) 

(2) 

PARALLEL: 

(PCS 1, FAILED; PCS 2 AND PCS 3 ON LINE AT HALF POWER) 


/pcs A 

(3) 

SERIES: 

(PCS 1, AND PCS 2 FAILED; PCS 3 ON LINE AT FULL POWER) 


Vcs J 

(1) 

STANDBY: 

(PCS 1 ON LINE AT FULL POWER; PCS 2 AND PCS 3 STANDBY 


^ ^ 

(2) 

STANDBY: 

(PCS 1 FAILED; PCS 2 ON LINE AT FULL POWER; PCS 3 STANDBY 



(3) 

SERIES: 

(PCS 1 AND PCS 2 FAILED; PCS 3 ON LINE AT FULL POWER 










Table 3: Reliability Analysis Summary for PCS Consisting of One, Two, or Three Units 


SYSTEM 

CONFIGURATION 

INITIAL 

OPERATIONAL MODE 

CONFIGURATION/MODE 

RELIABILITY 

1. PCS 1 

0 0 

SERIES {ONE OPERATING) 

P 

2. PCS 1 

OCT 750 

PCS 2 

PARALLEL (TWO OPERATING) 

2 p.p2 

STANDBY (ONE OPERATING, 
ONE SPARE 

P(1 - / n P) 

3. PCS 1 

/ PCS 2 \ 

PARALLEL (THREE OPERATING) 

3P - 3P 2 + P 3 

W 

STANDBY 

(ONE OPERATING, TWO SPARES) 

P 1 - in P + UnP) 2 

L 2 J 


Table 4: System Configuration Reliability 
PCS Configuration 


PCS 

RELIABILITY 

ONE PCS UNIT 
SERIES 

TWO PCS UNITS 

THREE PCS UNITS 

PARALLEL 

STANDBY 
(1 UNIT) 

PARALLEL 

STANDBY 
(2 UNITS) 

0.57 

0.57 

— — _ _ 

0.8904 


0.9805 

.60 

.60 

0.840 

.9065 

0.936 

.9848 

.63 

.63 

.863 


.949 


.665 

.665 


.936 


.9916 

.70 

.700 

.91 

.9497 

.973 

.9942 

.735 

.735 

.93 


.9814 


.76 

.76 


.9686 


.9972 

.8 

.80 

.96 

.9785 

.992 

.9984 

.84 

.84 

.974 


.996 


.855 

.855 



.9889 


.9994 

.90 

.900 

.99 

.9948 

.999 

.998 

.95 

.95 

.9975 


.9999 
























1 . 



3. 


DlJH 


HEAT 

TRANSPORT 


PCS 2 


H pcs 3 H 


LOAD 


Figure 1. - Dynamic power conversion system (PCS) candidate concept 
configurations involving one, two, and three PCS units. 



UNIT RELIABILITY, P 

Figure 2. - Relationship between unit failure rate and calcu- 
lated unit reliability for lifetimes of 2 and 7 years. 













POWER CONVERSION SYSTEM RELIABILITY, R 


Operational 



POWER CONVERSION UNIT RELIABILITY, P 

Figure 3. - Reliability comparison of dynamic power conversion 
system design concept configurations (constant unit reliability). 



Figure 4. - Reliability comparison of dynamic power conversion system 
design concept configurations (variable unit reliability). 




NUMBER OF PARALLEL PCS UNITS MINUS SPARES 


Figure 5. - Number of spares required to obtain reliability R 
(parallel mode; unit reliability, P=0.9). 



NUMBER OF PARALLEL PCS UNITS MINUS SPARES 


Figure 6. - Number of spares required to obtain reliability R 
(parallel mode; unit reliability, P = 0.95). 


DESIGN POWER, 
percent 



.80 .85 .90 .95 1.0 

ENGINE UNIT RELIABILITY, P 

Figure 7. - Effect of engine configuration and unit reliability 


on engine subsystem reliability. 


TOTAL SYSTEM MASS, kC 


ENGINE CONFIGURATION 
(TOTAL NO. /REQUIRED NO.) 



TOTAL SYSTEM CAPACITY /DESIGN POWER, percent 

Figure 8. - Engine subsystem reliability and system mass trends for 100 kWe, 1100K 
nuclear Brayton PCS. Overall reliability is 0.95. 



REACTOR OUTLET TEMPERATURE, K 


Figure 9. - System mass estimates for 100 kWe 
Brayton PCS based on 4/3 configuration (4 - 
33.3 kWe units, at least 3 surviving). 



Appendix - Calculation of Reliability 


The methods used to calculate system reliability for parallel and series operation 
are indicated by equations (1) and (2), respectively. A definition of the symbols 
used for each method and algebraic expressions for system reliability, R, 
resulting from two sample case assumptions for each method are also included. 
Finally, calculation of unit reliability, P, is shown in Equation (3). 


Parallel Operation - Binomial Distribution 

Let : n = No. of parallel PCS units in the system configuration 

k * No. of PCS units available for operation 
r = Index ranging from kto n 
P - Probability of successful PCS unit operation 
(1-P) = Probability of a PCS unit failing 

R = System operational reliability, that is the cumulative 
probability of at least k PCS units operating out of n 
total PCS units 


n 


R = 

Case 1: n 
Case 2: n 


V <P) r (l-P) n ' r n; 

r*k r! (n-r): 

- 2. r * 1, 2 R ■ (P) (1-P) (2/1) + (P) 2 (2/2) * 2P-P 2 

-3, r =1,2,3 R * (P) 1 (1-P) 2 (6/2) + <P> 2 (1-P) (6/2) + P 3 (l) - 3P-3P 2 


( 1 ) 


+ P 3 


Standby Operation 
Let: n 

(n-1) 
r 
k 
P 

(l-P) 

R 


Poisson Distribution 

No. of available PCS units in the system configuration 
No. of standby PCS units in the system configuration 
Index ranging from k to n-1 
No. of PCS units not operating (failed) 

Probability of successful PCS unit operation, or unit reliability 

Probability of a PCS unit failing 

System operational reliability, that is the probability 

of no more than (n-1) PCS units failing out of n total PCS units 


R * 


£ 


r=k 


P(-ln P) r 
r! 


( 2 ) 


Case 1: n = 2; (n-1) =1; r = 0, 1 ; 
Case 2: n = 3; (n-1) =2; r - 0,1,2 ; 


R = P + P(-lnP) 1 = P-PlnP - P (1-lnP) 


R = P - PlnP + P(lnPr = P 


1-lnP + (lnPr 


Random Failure Model Calculation of P 

Let : P = Unit reliability (probability of successful unit operation) 

X = Failure rate (usually expressed in failures per million hours) 
t = Required service life in hours (8760 hours per year) 

P = exp (-Xt) 


( 3 ) 
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